auth0 7.2.0 → 7.4.0-beta.1

package/dist/esm/management/api/requests/requests.d.mts

@@ -347,6 +347,7 @@ export interface CreateClientRequestContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration;
     my_organization_configuration?: Management.ClientMyOrganizationPostConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
+    oidc_support?: Management.ClientOidcSupportPost;
 }
 /**
  * @example
@@ -368,6 +369,34 @@ export interface RegisterCimdClientRequestContent {
     /** URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations. */
     external_client_id: string;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         fields: "fields",
+ *         include_fields: true,
+ *         take: 1,
+ *         from: "from",
+ *         sort: "name"
+ *     }
+ */
+export interface SearchClientsRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter). SCIM examples: `name eq "Auth0"`, `name sw "auth" and app_type eq "spa"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<br /><ul><li><i>client_id</i> - Auth0 client ID (case-sensitive, exact match)</li><li><i>external_client_id</i> - URL of the Client ID Metadata Document (CIMD); case-sensitive, exact match</li><li><i>name</i> - Client name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>app_type</i> - Application type (e.g. "spa", "native", "non_interactive")</li><li><i>is_first_party</i> - Whether the client is first-party (boolean)</li><li><i>updated_at</i> - Last update timestamp (supports date range operators; sortable)</li><li><i>metadata.{key}</i> - Filter by client metadata key-value pairs (max 2-level key depth, values indexed up to 64 characters)</li><li><i>client_grant.organization_id</i> - Filter by associated organization ID</li><li><i>client_grant.allow_any_organization</i> - Filter by allow any organization setting</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Comma-separated list of fields to include or exclude in the response. Works with the include_fields parameter to control projection mode. Maximum 50 fields. */
+    fields?: string | null;
+    /** Controls field projection mode. Set to true to include only fields specified in the fields parameter. Set to false to exclude fields specified in the fields parameter. Defaults to true if not specified. */
+    include_fields?: boolean | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.ClientSortFieldEnum | null;
+}
 /**
  * @example
  *     {
@@ -479,6 +508,7 @@ export interface UpdateClientRequestContent {
     async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
+    oidc_support?: Management.ClientOidcSupportPatch | null;
 }
 /**
  * @example
@@ -1470,6 +1500,8 @@ export interface CreateResourceServerRequestContent {
     access_token?: Management.ResourceServerAccessToken | null;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
+    /** When true, the resource server requires every consent approval to be digitally signed, so the approver cannot later deny a consent they granted. When false, consent decisions do not need a signature. Defaults to false. A configured value is still returned even after the related entitlement is disabled. */
+    require_consent_non_repudiation?: boolean;
     authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
@@ -1543,6 +1575,8 @@ export interface UpdateResourceServerRequestContent {
     access_token?: Management.ResourceServerAccessToken | null;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
+    /** When true, the resource server requires every consent approval to be digitally signed, so the approver cannot later deny a consent they granted. When false, consent decisions do not need a signature. Defaults to false. A configured value is still returned even after the related entitlement is disabled. */
+    require_consent_non_repudiation?: boolean;
     authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
@@ -1898,8 +1932,8 @@ export interface ListUserBlocksByIdentifierRequestParameters {
     /** Should be any of a username, phone number, or email. */
     identifier: string;
     /**
-     *           If true and Brute Force Protection is enabled and configured to block logins, will return a list of blocked IP addresses.
-     *           If true and Brute Force Protection is disabled, will return an empty list.
+     *           If true, returns only blocks that are currently enforced (e.g. subject to protection status, IP allowlist, etc.).
+     *           If false or omitted, returns all blocks regardless of enforcement state.
      *
      */
     consider_brute_force_enablement?: boolean | null;
@@ -1922,8 +1956,8 @@ export interface DeleteUserBlocksByIdentifierRequestParameters {
  */
 export interface ListUserBlocksRequestParameters {
     /**
-     *           If true and Brute Force Protection is enabled and configured to block logins, will return a list of blocked IP addresses.
-     *           If true and Brute Force Protection is disabled, will return an empty list.
+     *           If true, returns only blocks that are currently enforced (e.g. subject to protection status, IP allowlist, etc.).
+     *           If false or omitted, returns all blocks regardless of enforcement state.
      *
      */
     consider_brute_force_enablement?: boolean | null;
@@ -2251,6 +2285,7 @@ export interface UpdateBruteForceSettingsRequestContent {
     mode?: Management.BruteForceProtectionModeEnum;
     /** Maximum number of unsuccessful attempts. */
     max_attempts?: number;
+    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum;
 }
 /**
  * @example
@@ -2824,6 +2859,71 @@ export interface CreateEventStreamRedeliveryRequestContent {
     /** Filter by event type */
     event_types?: Management.EventStreamEventTypeEnum[];
 }
+/**
+ * @example
+ *     {
+ *         from: "from",
+ *         take: 1,
+ *         status: "draft",
+ *         authentication_flow: "authentication_flow",
+ *         feature_flag_id: "feature_flag_id"
+ *     }
+ */
+export interface ListExperimentsRequestParameters {
+    /** Optional Id from which to start selection. */
+    from?: string | null;
+    /** Number of experiments to return per page. Defaults to 25, maximum 50. */
+    take?: number | null;
+    /** Filter by status. Exact match. */
+    status?: Management.ExperimentStatusEnum | null;
+    /** Filter by authentication flow. Exact match. */
+    authentication_flow?: string | null;
+    /** Filter by feature flag ID. Exact match. */
+    feature_flag_id?: string | null;
+}
+/**
+ * @example
+ *     {
+ *         name: "name",
+ *         feature_flag_id: "feature_flag_id",
+ *         authentication_flow: "authentication"
+ *     }
+ */
+export interface CreateExperimentRequestContent {
+    /** A human-readable name for the experiment */
+    name: string;
+    /** A description of the experiment */
+    description?: string;
+    /** The ID of the feature flag this experiment is based on */
+    feature_flag_id: string;
+    authentication_flow: Management.AuthenticationFlowEnum;
+    /** Applies only to Auth0-managed flags. Controls where non-overridden config keys resolve from: 'tenant' inherits the tenant's live config so the experiment overlays only its changes, 'flag' uses the flag's frozen defaults for a complete config. Optional; defaults to 'tenant' when omitted. Rejected for customer-defined flags. */
+    default_config?: Management.DefaultConfigEnum;
+    /** The traffic allocation strategy for this experiment */
+    allocation_strategy?: Management.AllocationStrategyEnum;
+    /** Traffic allocations mapping variations to weights or segments */
+    allocations?: Management.AllocationRequestItem[];
+    /** Ramp experiment levels configuration. A strictly-increasing sequence of exposure percentages, each an integer in [0, 100]. */
+    levels?: number[];
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateExperimentRequestParameters {
+    /** A human-readable name for the experiment */
+    name?: string;
+    /** A description of the experiment */
+    description?: string | null;
+    /** Specifies the target authentication flow for this experiment. This field can only be modified on draft experiments. Must be one of: authentication, mfa_enrollment, mfa_challenge, password_reset, passkey_enrollment, or all. Note that the all value targets every flow at once, but requires that this is the only active experiment. */
+    authentication_flow?: Management.AuthenticationFlowEnum;
+    /** Replaces all traffic allocations. Cannot be modified while the experiment is active. */
+    allocations?: Management.AllocationRequestItem[];
+    /** Applies only to Auth0-managed flags. Controls where non-overridden config keys resolve from: 'tenant' inherits the tenant's live config, 'flag' uses the flag's frozen defaults. Can only be modified on draft experiments. Rejected for customer-defined flags. */
+    default_config?: Management.DefaultConfigEnum;
+    /** Ramp experiment levels configuration. A strictly-increasing sequence of exposure percentages, each an integer in [0, 100]. Can only be modified on draft experiments. */
+    levels?: number[];
+}
 /**
  * @example
  *     {
@@ -2834,6 +2934,140 @@ export interface AdvanceRampRequestContent {
     /** The target percentage level from the experiment schedule. Must be the immediate next level. */
     target_level: number;
 }
+/**
+ * @example
+ *     {
+ *         status: "active"
+ *     }
+ */
+export interface UpdateExperimentStatusRequestContent {
+    status: Management.ExperimentTransitionStatusEnum;
+}
+/**
+ * @example
+ *     {
+ *         from: "from",
+ *         take: 1,
+ *         type: "auth0",
+ *         status: "draft"
+ *     }
+ */
+export interface ListFeatureFlagsRequestParameters {
+    /** Optional Id from which to start selection. */
+    from?: string | null;
+    /** Number of feature flags to return per page. Defaults to 25, maximum 50. */
+    take?: number | null;
+    /** Filter by type. Exact match. */
+    type?: Management.FeatureFlagTypeEnum | null;
+    /** Filter by status. Exact match. */
+    status?: Management.FeatureFlagStatusEnum | null;
+}
+/**
+ * @example
+ *     {
+ *         name: "name",
+ *         parameters: {}
+ *     }
+ */
+export interface CreateFeatureFlagRequestContent {
+    /** A human-readable name for the feature flag */
+    name: string;
+    /** A description of what this feature flag controls */
+    description?: string;
+    parameters: Management.CreateFeatureFlagParameters;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateFeatureFlagRequestContent {
+    /** A human-readable name for the feature flag */
+    name?: string;
+    /** A description of what this feature flag controls */
+    description?: string | null;
+    parameters?: Management.UpdateFeatureFlagParameters;
+}
+/**
+ * @example
+ *     {
+ *         status: "draft"
+ *     }
+ */
+export interface UpdateFeatureFlagStatusRequestContent {
+    /** The target status to transition the feature flag to. */
+    status: Management.FeatureFlagStatusEnum;
+}
+/**
+ * @example
+ *     {
+ *         from: "from",
+ *         take: 1,
+ *         type: "auth0"
+ *     }
+ */
+export interface ListSegmentsRequestParameters {
+    /** Optional Id from which to start selection. */
+    from?: string | null;
+    /** Number of segments to return per page. Defaults to 25, maximum 50. */
+    take?: number | null;
+    /** Filter by type. Exact match. */
+    type?: Management.SegmentTypeFilterEnum | null;
+}
+/**
+ * @example
+ *     {
+ *         name: "name",
+ *         rules: [{}]
+ *     }
+ */
+export interface CreateSegmentRequestContent {
+    /** A human-readable name for the segment */
+    name: string;
+    /** A description of the segment */
+    description?: string;
+    /** An ordered list of rules. A segment matches if any rule matches. Each rule is limited to 4KB and the whole segment to 10KB (serialized). */
+    rules: Management.SegmentRule[];
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateSegmentRequestContent {
+    /** A human-readable name for the segment */
+    name?: string;
+    /** A description of the segment */
+    description?: string | null;
+    /** Replaces the entire rules array. Each rule is limited to 4KB and the whole segment to 10KB (serialized). */
+    rules?: Management.SegmentRule[];
+}
+/**
+ * @example
+ *     {
+ *         name: "name",
+ *         overrides: {
+ *             "key": "value"
+ *         }
+ *     }
+ */
+export interface CreateVariationRequestContent {
+    /** A human-readable name for the variation */
+    name: string;
+    /** A description of what this variation controls */
+    description?: string;
+    /** Configuration overrides for this variation; keys must exist in the parent flag parameters. Empty {} is the baseline (control) variation that overrides nothing. */
+    overrides: Management.VariationOverridesMap;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateVariationRequestContent {
+    /** A human-readable name for the variation */
+    name?: string;
+    /** A description of what this variation controls */
+    description?: string | null;
+    overrides?: Management.UpdateVariationOverridesMap;
+}
 /**
  * @example
  *     {

package/dist/esm/management/api/resources/clients/client/Client.d.mts

@@ -151,6 +151,43 @@ export declare class ClientsClient {
      */
     registerCimdClient(request: Management.RegisterCimdClientRequestContent, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<Management.RegisterCimdClientResponseContent>;
     private __registerCimdClient;
+    /**
+     * Search clients using SCIM or Lucene filter syntax with low-latency, eventually consistent results.
+     * Use the parser parameter to specify "scim" or "lucene" syntax (default: "lucene").
+     * This endpoint provides an alternative to the standard GET /clients endpoint with better performance
+     * for complex queries. Results may not reflect recent updates immediately.
+     *
+     * - This endpoint only supports `read:clients` and `read:client_summary` scopes. The `read:client_keys` and `read:client_credentials` scopes are not supported.
+     * - The following fields are never returned by this endpoint:
+     *   - `client_secret`
+     *   - `encryption_key`
+     *   - `signing_keys`
+     *   - `owners`
+     *   - `addons`
+     *
+     * @param {Management.SearchClientsRequestParameters} request
+     * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link Management.GatewayTimeoutError}
+     *
+     * @example
+     *     await client.clients.search({
+     *         q: "q",
+     *         parser: "scim",
+     *         fields: "fields",
+     *         include_fields: true,
+     *         take: 1,
+     *         from: "from",
+     *         sort: "name"
+     *     })
+     */
+    search(request?: Management.SearchClientsRequestParameters, requestOptions?: ClientsClient.RequestOptions): Promise<core.Page<Management.ClientSearchResponse, Management.SearchClientsResponseContent>>;
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
      * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).

package/dist/esm/management/api/resources/clients/client/Client.mjs

@@ -390,6 +390,117 @@ export class ClientsClient {
             return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/clients/cimd/register");
         });
     }
+    /**
+     * Search clients using SCIM or Lucene filter syntax with low-latency, eventually consistent results.
+     * Use the parser parameter to specify "scim" or "lucene" syntax (default: "lucene").
+     * This endpoint provides an alternative to the standard GET /clients endpoint with better performance
+     * for complex queries. Results may not reflect recent updates immediately.
+     *
+     * - This endpoint only supports `read:clients` and `read:client_summary` scopes. The `read:client_keys` and `read:client_credentials` scopes are not supported.
+     * - The following fields are never returned by this endpoint:
+     *   - `client_secret`
+     *   - `encryption_key`
+     *   - `signing_keys`
+     *   - `owners`
+     *   - `addons`
+     *
+     * @param {Management.SearchClientsRequestParameters} request
+     * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link Management.GatewayTimeoutError}
+     *
+     * @example
+     *     await client.clients.search({
+     *         q: "q",
+     *         parser: "scim",
+     *         fields: "fields",
+     *         include_fields: true,
+     *         take: 1,
+     *         from: "from",
+     *         sort: "name"
+     *     })
+     */
+    search() {
+        return __awaiter(this, arguments, void 0, function* (request = {}, requestOptions) {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { q, parser, fields, include_fields: includeFields, take = 50, from: from_, sort } = request;
+                const _queryParams = {
+                    q,
+                    parser: parser !== undefined ? parser : undefined,
+                    fields,
+                    include_fields: includeFields,
+                    take,
+                    from: from_,
+                    sort: sort !== undefined ? sort : undefined,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, "clients/search"),
+                    method: "GET",
+                    headers: _headers,
+                    queryString: core.url
+                        .queryBuilder()
+                        .addMany(_queryParams)
+                        .mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams)
+                        .build(),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        case 500:
+                            throw new Management.InternalServerError(_response.error.body, _response.rawResponse);
+                        case 504:
+                            throw new Management.GatewayTimeoutError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/clients/search");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.clients) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
      * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).

package/dist/esm/management/api/resources/experimentation/client/Client.d.mts

@@ -1,12 +1,18 @@
 import type { BaseClientOptions } from "../../../../BaseClient.mjs";
 import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs";
 import { ExperimentsClient } from "../resources/experiments/client/Client.mjs";
+import { FeatureFlagsClient } from "../resources/featureFlags/client/Client.mjs";
+import { SegmentsClient } from "../resources/segments/client/Client.mjs";
 export declare namespace ExperimentationClient {
     type Options = BaseClientOptions;
 }
 export declare class ExperimentationClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentationClient.Options>;
     protected _experiments: ExperimentsClient | undefined;
+    protected _featureFlags: FeatureFlagsClient | undefined;
+    protected _segments: SegmentsClient | undefined;
     constructor(options: ExperimentationClient.Options);
     get experiments(): ExperimentsClient;
+    get featureFlags(): FeatureFlagsClient;
+    get segments(): SegmentsClient;
 }

package/dist/esm/management/api/resources/experimentation/client/Client.mjs

@@ -1,6 +1,8 @@
 // This file was auto-generated by Fern from our API Definition.
 import { normalizeClientOptionsWithAuth } from "../../../../BaseClient.mjs";
 import { ExperimentsClient } from "../resources/experiments/client/Client.mjs";
+import { FeatureFlagsClient } from "../resources/featureFlags/client/Client.mjs";
+import { SegmentsClient } from "../resources/segments/client/Client.mjs";
 export class ExperimentationClient {
     constructor(options) {
         this._options = normalizeClientOptionsWithAuth(options);
@@ -9,4 +11,12 @@ export class ExperimentationClient {
         var _a;
         return ((_a = this._experiments) !== null && _a !== void 0 ? _a : (this._experiments = new ExperimentsClient(this._options)));
     }
+    get featureFlags() {
+        var _a;
+        return ((_a = this._featureFlags) !== null && _a !== void 0 ? _a : (this._featureFlags = new FeatureFlagsClient(this._options)));
+    }
+    get segments() {
+        var _a;
+        return ((_a = this._segments) !== null && _a !== void 0 ? _a : (this._segments = new SegmentsClient(this._options)));
+    }
 }

package/dist/esm/management/api/resources/experimentation/resources/experiments/client/Client.d.mts

@@ -10,6 +10,101 @@ export declare namespace ExperimentsClient {
 export declare class ExperimentsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentsClient.Options>;
     constructor(options: ExperimentsClient.Options);
+    /**
+     * Retrieve a paginated list of experiments for the tenant, with optional filters.
+     *
+     * @param {Management.ListExperimentsRequestParameters} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.list({
+     *         from: "from",
+     *         take: 1,
+     *         status: "draft",
+     *         authentication_flow: "authentication_flow",
+     *         feature_flag_id: "feature_flag_id"
+     *     })
+     */
+    list(request?: Management.ListExperimentsRequestParameters, requestOptions?: ExperimentsClient.RequestOptions): Promise<core.Page<Management.ExperimentListItem, Management.ListExperimentsResponseContent>>;
+    /**
+     * Create a new experiment for A/B testing.
+     *
+     * @param {Management.CreateExperimentRequestContent} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.UnprocessableEntityError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.create({
+     *         name: "name",
+     *         feature_flag_id: "feature_flag_id",
+     *         authentication_flow: "authentication"
+     *     })
+     */
+    create(request: Management.CreateExperimentRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.CreateExperimentResponseContent>;
+    private __create;
+    /**
+     * Retrieve a single experiment with its allocations by ID.
+     *
+     * @param {string} id - The ID of the experiment to retrieve.
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.get("id")
+     */
+    get(id: string, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.GetExperimentResponseContent>;
+    private __get;
+    /**
+     * Permanently delete an experiment and its allocations by ID. Active experiments cannot be deleted; pause or complete first. Idempotent: returns 204 even if the experiment does not exist.
+     *
+     * @param {string} id - The ID of the experiment to delete.
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.delete("id")
+     */
+    delete(id: string, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __delete;
+    /**
+     * Partially update an experiment by ID. Only provided fields are updated. Providing allocations replaces the entire allocations set.
+     *
+     * @param {string} id - The ID of the experiment to update.
+     * @param {Management.UpdateExperimentRequestParameters} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.UnprocessableEntityError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.update("id")
+     */
+    update(id: string, request?: Management.UpdateExperimentRequestParameters, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateExperimentResponseContent>;
+    private __update;
     /**
      * Increments the current ramp index to the requested target level. Up-only: the target must be the immediate next level in the schedule. Idempotent: calling with the current level returns success without writing anything.
      *
@@ -31,4 +126,42 @@ export declare class ExperimentsClient {
      */
     advanceRamp(id: string, request: Management.AdvanceRampRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.AdvanceRampResponseContent>;
     private __advanceRamp;
+    /**
+     * Transitions an experiment through its lifecycle: draft → active, active → paused, paused → active, active/paused → completed. Activation runs full readiness validation.
+     *
+     * @param {string} id - The ID of the experiment to transition.
+     * @param {Management.UpdateExperimentStatusRequestContent} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.UnprocessableEntityError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.updateStatus("id", {
+     *         status: "active"
+     *     })
+     */
+    updateStatus(id: string, request: Management.UpdateExperimentStatusRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateExperimentStatusResponseContent>;
+    private __updateStatus;
+    /**
+     * Checks whether an experiment is ready to be activated. Returns is_valid boolean and an errors array describing any blockers. Read-only; no state is modified.
+     *
+     * @param {string} id - The ID of the experiment to validate.
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.validate("id")
+     */
+    validate(id: string, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.ValidateExperimentResponseContent>;
+    private __validate;
 }